Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
File: 435CoUa5C6fNMxrWoT7vHaL7pEA.mft (raw, json)
Hash identifier: PPaN44xTgjfHwatnw2cEgxDrUYGBJbdDlxxbIfGHQSU=
Subject key identifier: 7B:33:44:4C:36:E7:F2:D0:AA:A0:13:ED:6D:F5:6D:3A:4A:C4:00:69
Authority key identifier: E3:7E:42:A1:46:B9:0B:A7:CD:33:1A:D6:A1:3E:EF:1D:A2:FB:A4:40
Certificate issuer: /CN=e37e42a146b90ba7cd331ad6a13eef1da2fba440
Certificate serial: 0196C9BB440FC46B2CDE59EF516960A5424F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
Manifest number: 0747
Signing time: Tue 13 May 2025 13:00:15 +0000
Manifest this update: Tue 13 May 2025 13:00:15 +0000
Manifest next update: Wed 14 May 2025 13:00:15 +0000
Files and hashes: 1: 435CoUa5C6fNMxrWoT7vHaL7pEA.crl (hash: DECLn/GjIE/SYF+s5AWdGRmQsA/AQrAjb06WOYploAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 13:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:bb:44:0f:c4:6b:2c:de:59:ef:51:69:60:a5:42:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37e42a146b90ba7cd331ad6a13eef1da2fba440
Validity
Not Before: May 13 13:00:15 2025 GMT
Not After : May 14 13:00:15 2025 GMT
Subject: CN=7b33444c36e7f2d0aaa013ed6df56d3a4ac40069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:31:d3:01:e1:0a:d7:63:4a:d3:72:4f:1c:0c:
ed:a8:54:da:f8:79:27:f0:d8:0b:1e:30:ce:82:bc:
7e:2e:c8:a3:73:8f:1e:c2:03:a7:d0:68:fa:cb:89:
d7:88:5b:e5:3c:bc:4e:71:c4:34:8f:82:27:5f:87:
8d:8e:f8:4e:38:e3:56:a0:db:74:3b:6d:46:25:a7:
7a:ef:f5:2f:0a:4c:cc:43:eb:26:4e:b7:7d:ec:b6:
38:74:d8:c0:69:b9:aa:cb:9d:d9:d1:18:05:32:96:
be:34:63:49:6f:a5:0e:24:63:c3:d0:c4:1b:3a:e2:
ac:9b:47:eb:59:45:5b:49:7c:61:b7:35:45:d1:8f:
fc:5b:13:53:0e:c8:4f:07:5c:41:16:56:fc:30:34:
62:bd:d5:df:f9:3a:d6:59:ba:be:3c:67:65:bd:ff:
6a:00:68:28:3b:b7:6a:54:ce:4c:68:de:3f:cf:ac:
99:83:94:5b:2b:b6:91:ea:55:f0:1d:42:14:ac:7c:
13:1d:80:5a:81:66:0b:5c:8a:ee:3d:32:6c:f4:f0:
4d:ab:f1:df:46:00:85:4b:1a:e4:04:8c:a9:e6:7f:
a0:bd:3f:ef:0a:a0:40:cd:16:fd:cb:9f:3e:08:6e:
2e:81:d6:6d:ad:df:a2:5a:5c:91:54:e3:7d:53:da:
62:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:33:44:4C:36:E7:F2:D0:AA:A0:13:ED:6D:F5:6D:3A:4A:C4:00:69
X509v3 Authority Key Identifier:
keyid:E3:7E:42:A1:46:B9:0B:A7:CD:33:1A:D6:A1:3E:EF:1D:A2:FB:A4:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:fd:ff:05:b5:35:ae:5a:33:1b:c1:b9:57:1a:0b:15:7a:67:
0b:c9:a2:d1:fe:3d:8b:46:c4:9b:30:05:54:c4:1b:bf:72:37:
0b:fd:86:fa:d6:ad:1b:ea:41:61:f3:95:1f:b2:c0:ed:0f:47:
93:65:54:9a:25:40:40:cb:fb:01:9d:cf:37:38:43:29:0a:ab:
57:ff:ed:10:c1:25:98:4d:34:70:80:c8:55:34:c5:b6:fe:38:
e5:dc:9e:d3:39:4d:90:c6:18:22:9e:d4:df:a7:d0:4b:19:a9:
c8:22:3f:e1:a9:fb:6d:a0:30:66:2b:d6:3a:73:1f:e1:15:5d:
c6:e3:0f:fa:69:6f:96:0f:6d:f9:f7:0d:11:3d:3c:77:92:e4:
c6:38:b6:68:79:19:a0:21:9e:5c:fd:cc:7f:99:85:5e:bd:d7:
40:84:b1:2e:90:c4:37:20:27:a6:6e:38:79:ea:bf:bc:41:9a:
06:f8:82:86:79:79:33:6a:84:e9:b8:3c:72:67:1a:04:05:18:
79:5d:20:74:6d:b9:56:30:2d:c5:ca:8a:48:7a:55:27:2e:6a:
f3:05:39:d5:34:81:d9:99:09:69:05:03:a6:d4:7c:7d:c4:e7:
20:a6:01:59:fe:dc:59:2f:e2:70:1b:7c:27:77:72:7d:2b:6d:
d2:ac:ea:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 14:29:11 2025 by rpki-client